$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa File: 0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa (raw, json) Hash identifier: gcaahU/mv0ArMczFnVxstcfGnNIR0WYUjEHet4O6GJc= Subject key identifier: 7D:C6:53:AD:62:30:F6:54:03:0C:BB:72:5C:3D:32:CF:AD:E5:AA:D5 Certificate issuer: /CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Certificate serial: 32C641C13CF7E12DA0F774C49F8459FCE9FD75FA Authority key identifier: BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa Signing time: Mon 21 Jul 2025 16:10:22 +0000 ROA not before: Mon 21 Jul 2025 16:10:22 +0000 ROA not after: Mon 25 Aug 2025 23:59:59 +0000 asID: 21664 IP address blocks: 2605:9cc0:c03::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Fri 25 Jul 2025 14:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 32:c6:41:c1:3c:f7:e1:2d:a0:f7:74:c4:9f:84:59:fc:e9:fd:75:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424 Validity Not Before: Jul 21 16:10:22 2025 GMT Not After : Aug 25 23:59:59 2025 GMT Subject: serialNumber=0defa8774aa27067ee9a10c3769bc97f39b73e80887b69f3caa5e9f7f5a7f32c, CN=f7243785-46de-414b-9b8f-7a9699e979e2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:6c:d7:f2:3a:3b:01:00:ad:b6:7c:7b:32:40: 47:b4:fd:87:50:bb:50:de:1e:68:cd:4b:dd:cc:c0: 22:e5:8f:51:61:35:f3:e1:95:d3:90:3b:f5:fa:aa: d1:6d:11:63:b7:4a:a9:91:cc:d0:6d:fa:ba:50:78: c3:eb:d5:c0:86:f6:5e:1e:a5:90:15:e8:95:26:f8: 0a:f9:12:3d:98:ea:e4:3e:6a:97:e8:eb:08:7e:b3: 6f:f5:f8:d4:d4:cd:cb:7c:2a:ed:1f:48:0c:b6:36: b8:00:99:9b:ce:c8:90:27:66:43:63:29:37:cc:0e: fe:f9:4b:12:a8:bb:56:2c:23:fb:20:a0:5d:b7:05: fc:1e:33:4c:3a:74:58:98:76:4a:92:d6:2d:8b:e9: 4f:76:8f:9b:b0:88:fd:65:77:40:df:b4:92:1a:f8: 24:cd:e2:a3:84:4a:3c:1e:3f:c8:1d:d7:3a:37:5d: 14:af:9d:5f:62:f2:e8:ee:a0:59:96:f7:50:54:9d: 4e:17:81:a6:79:52:31:8e:da:be:fb:ed:ba:10:bb: 5c:99:23:fb:74:55:2a:80:4f:97:2e:ab:af:4b:cb: 44:8b:74:31:ed:17:8b:2d:dd:39:9c:d9:7e:61:17: 04:ec:20:b7:2d:7c:28:aa:ff:b7:88:c1:eb:68:23: 97:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 7D:C6:53:AD:62:30:F6:54:03:0C:BB:72:5C:3D:32:CF:AD:E5:AA:D5 X509v3 Authority Key Identifier: keyid:BA:0C:E1:7E:23:3F:BC:71:D4:30:AB:DA:C2:C3:0C:79:04:B6:A0:E7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3ea6eab-f41f-4e46-a8f6-3da4a128d78c/97ac0028d6efbddafb7d9c71e29eb71c005e34fc19f1f7c424.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/0c8fb97d-8e7e-45c9-9b3a-838dd669dd47.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/54602fb0-a9d4-4f9f-b0ca-be2a139ea92b/773a-32cceKetxwAXjT8GfH3xCQ.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2605:9cc0:c03::/48 Signature Algorithm: sha256WithRSAEncryption aa:f9:32:33:73:a8:6e:ae:c4:f2:42:13:44:64:4f:29:c4:0c: ec:7e:fa:dc:54:73:83:c7:97:f7:63:bd:03:09:02:ac:49:02: 7c:30:80:bf:09:e9:f0:76:8d:0f:a5:d9:c7:a9:c5:8f:80:57: ad:1d:fe:51:e0:aa:d3:48:b2:d2:c7:84:d1:92:c2:d4:18:25: 19:72:02:92:10:7f:d1:66:81:00:78:47:4e:1f:40:4a:95:6a: 2a:c9:86:d5:d5:5e:2f:7d:5b:1a:1c:db:26:65:ca:fe:91:09: b9:11:cc:ec:ba:bd:22:de:41:99:b4:8a:17:ab:ae:de:30:3c: 45:26:fc:e1:ef:49:00:e2:2c:8c:1b:09:20:e5:bc:69:fd:f0: a9:3d:65:96:7a:0c:63:d9:b5:d2:b1:60:ba:54:64:ee:7f:1b: 41:00:5a:ae:6c:c8:38:ea:3a:86:c7:21:32:d1:5e:9e:e0:27: 5f:64:60:18:f0:85:bf:d8:89:2b:49:0f:ad:9c:e2:66:eb:40: cf:aa:c0:e6:23:9a:61:5d:d0:8d:b8:3a:65:8e:5a:b7:9d:06: c7:32:92:2a:d6:09:39:b6:ee:dd:1e:5a:5a:11:41:51:2b:2c: 35:6d:3c:17:fd:df:22:e9:82:3d:4f:8b:8c:27:e2:8e:95:36: 25:b5:b5:20 -----BEGIN CERTIFICATE----- MIIF+zCCBOOgAwIBAgIUMsZBwTz34S2g93TEn4RZ/On9dfowDQYJKoZIhvcNAQEL BQAwPTE7MDkGA1UEAxMyOTdhYzAwMjhkNmVmYmRkYWZiN2Q5YzcxZTI5ZWI3MWMw MDVlMzRmYzE5ZjFmN2M0MjQwHhcNMjUwNzIxMTYxMDIyWhcNMjUwODI1MjM1OTU5 WjB6MUkwRwYDVQQFE0AwZGVmYTg3NzRhYTI3MDY3ZWU5YTEwYzM3NjliYzk3ZjM5 YjczZTgwODg3YjY5ZjNjYWE1ZTlmN2Y1YTdmMzJjMS0wKwYDVQQDEyRmNzI0Mzc4 NS00NmRlLTQxNGItOWI4Zi03YTk2OTllOTc5ZTIwggEiMA0GCSqGSIb3DQEBAQUA A4IBDwAwggEKAoIBAQC6bNfyOjsBAK22fHsyQEe0/YdQu1DeHmjNS93MwCLlj1Fh NfPhldOQO/X6qtFtEWO3SqmRzNBt+rpQeMPr1cCG9l4epZAV6JUm+Ar5Ej2Y6uQ+ apfo6wh+s2/1+NTUzct8Ku0fSAy2NrgAmZvOyJAnZkNjKTfMDv75SxKou1YsI/sg oF23BfweM0w6dFiYdkqS1i2L6U92j5uwiP1ld0DftJIa+CTN4qOESjweP8gd1zo3 XRSvnV9i8ujuoFmW91BUnU4XgaZ5UjGO2r777boQu1yZI/t0VSqAT5cuq69Ly0SL dDHtF4st3Tmc2X5hFwTsILctfCiq/7eIwetoI5fNAgMBAAGjggK0MIICsDAdBgNV HQ4EFgQUfcZTrWIw9lQDDLtyXD0yz63lqtUwHwYDVR0jBBgwFoAUugzhfiM/vHHU MKvawsMMeQS2oOcwDgYDVR0PAQH/BAQDAgeAMIHzBggrBgEFBQcBAQSB5jCB4zCB 4AYIKwYBBQUHMAKGgdNyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9h cmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2Qz LzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2VhNmVhYi1m NDFmLTRlNDYtYThmNi0zZGE0YTEyOGQ3OGMvOTdhYzAwMjhkNmVmYmRkYWZiN2Q5 YzcxZTI5ZWI3MWMwMDVlMzRmYzE5ZjFmN2M0MjQuY2VyMIGeBggrBgEFBQcBCwSB kTCBjjCBiwYIKwYBBQUHMAuGf3JzeW5jOi8vcnBraS1yc3luYy51cy1lYXN0LTIu YW1hem9uYXdzLmNvbS92b2x1bWUvNTQ2MDJmYjAtYTlkNC00ZjlmLWIwY2EtYmUy YTEzOWVhOTJiLzBjOGZiOTdkLThlN2UtNDVjOS05YjNhLTgzOGRkNjY5ZGQ0Ny5y b2EwgYgGA1UdHwSBgDB+MHygeqB4hnZyc3luYzovL3Jwa2ktcnN5bmMudXMtZWFz dC0yLmFtYXpvbmF3cy5jb20vdm9sdW1lLzU0NjAyZmIwLWE5ZDQtNGY5Zi1iMGNh LWJlMmExMzllYTkyYi83NzNhLTMyY2NlS2V0eHdBWGpUOEdmSDN4Q1EuY3JsMBgG A1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgAC MAkDBwAmBZzADAMwDQYJKoZIhvcNAQELBQADggEBAKr5MjNzqG6uxPJCE0RkTynE DOx++txUc4PHl/djvQMJAqxJAnwwgL8J6fB2jQ+l2cepxY+AV60d/lHgqtNIstLH hNGSwtQYJRlyApIQf9FmgQB4R04fQEqVairJhtXVXi99Wxoc2yZlyv6RCbkRzOy6 vSLeQZm0iherrt4wPEUm/OHvSQDiLIwbCSDlvGn98Kk9ZZZ6DGPZtdKxYLpUZO5/ G0EAWq5syDjqOobHITLRXp7gJ19kYBjwhb/YiStJD62c4mbrQM+qwOYjmmFd0I24 OmWOWredBscykirWCTm27t0eWloRQVErLDVtPBf93yLpgj1Pi4wn4o6VNiW1tSA= -----END CERTIFICATE-----Generated at Thu Jul 24 04:51:56 2025 by rpki-client